Firefox 3.0.7 addresses maybe more than three security issues

By Scott M. Fulton, III | Published March 5, 2009, 11:18 AM

The latest commercial edition of Firefox, version 3.0.7, is said to address three "critical" security issues. But a close look at the list itself shows that a myriad of similar issues were grouped together as one, making the total list of high-level issues as high as six.

Download Mozilla Firefox 3.0.7 for Windows from Fileforum now.

Four issues with layout engine crashes collectively constituted a single security issue, and the concern here is the possibility -- though no proof of concept yet exists -- that such crashes could lead to exploitable memory corruptions. Two of the four memory crash issues involve both series 2 and 3 of the browser, and some only occur when certain add-ons are installed.

In one case, a layout crash was reported by Firefox contributor Jesse Ruderman that was best recreated with the installation of Quitter, a quick-exit add-on written...by Jesse Ruderman.

Comments

View comments by with a score of at least

Opera needed patching yesterday. Good job Chrome is proving not only to be the fastest, but also the most secure browser available.

Score: 0

|

Sometimes, multiple issues happen because of one function used by multiple features. It's reasonable that they found only one thing that was the cause of multiple problems.

The important point here is that they fixed them.

Score: 0

|

One would think a link to the changelog would have been included in this article. I suppose you'd rather we find it ourselves?

Score: -2

|

How hard is it to find a change log?

http://www.mozilla.com/e...efox/3.0.7/releasenotes/

Wow that took all of 2 seconds to visit the Firefox Home Page * and click the link to release notes.

*Edit

Score: 0

|

In an article regarding the changes in 3.0.7, it would be nice to *not* have to use something other than this site to find it. Remember, the point is to keep us here, right?

Score: 0

|

If you and foxfyre keep on pace they shouldn't have to worry about keeping anyone else at the site.

Score: 0

|

Report: Microsoft to randomize Europe's browser screen choices

The fact that "A" is for "Apple" was apparently at the heart of browser vendor objections to Microsoft's alternative to listing IE first.

Acer eclipses Dell for #2 spot in global PC shipments, says iSuppli data

It literally does look like a 360-degree turnaround in Dell's fortunes, as the bells of bad tidings now toll solely for Dell.

Microsoft, don't hang up on Windows Mobile, but do call for help

Only a Manhattan Project can save Microsoft's phone strategy now.

See ya later, WinMo: Microsoft's mobile strategy needs a reboot

Carmi Levy | Wide Angle Zoom: Hands up if you're considering upgrading to a Windows phone for the holidays...Anybody?

Will Nokia's plans further alienate American consumers?

A look at Nokia's plans for the coming years does little to shine up the company's increasingly dull image.

Bing bonked by service outage Thursday, Microsoft configured the wrong server

It's always nice to have a backup, but it's even nicer to remember which one is the backup. That's the lesson Bing's admins learned yesterday evening.

Survey reveals there are more women then men, including on social networks

If you think you can market your products and services online as though you're selling car batteries in the middle of halftime, think again. And again.

Android team updates 'Donut' and 'Eclair' SDKs

The Android SDK includes components which optimize app development for each version of the mobile operating system. Today, the 1.6 and 2.0 components got updates.

The Black Screen Syndrome, or, Tech news in search of the apocalypse

Scott Fulton On Point: This is a story about something that should not have been a story, about something that at one time was a story.

Online advertising evolves away from display, toward interactive software

Marketing departments and agencies are increasingly establishing positions for "creative technologists" who can steer designers and developers toward platforms that enable direct connections with consumers.

Comcast deal for NBC Universal is about content, not broadband

Although Comcast is certainly America's largest broadband provider, at least for PCs, in most regards, today's deal with GE may not impact the Internet at all.